$ curl -s -H "ApiKey: a2a9dbf6.6b2e9362728ba1c909ab165fd3aba3e015f7d80c03adc363" http://127.0.0.1:8138/api/info
{"version":"2.10.1"}

$ curl -s -b cj.txt 'http://127.0.0.1:8138/api/trpc/serverSettings.getAll'

$ docker inspect homarr-2-10-1-server --format '{{json .Config.Env}}'
["SECRET_ENCRYPTION_KEY_FILE=/run/secrets/secret_key","LOG_LEVEL=debug","NO_EXTERNAL_CONNECTION=true","PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","DB_URL=/appdata/db/db.sqlite","DB_DIALECT=sqlite","DB_DRIVER=better-sqlite3","AUTH_PROVIDERS=credentials","REDIS_IS_EXTERNAL=false","NODE_ENV=production"]

Starting with UID='1000', GID='1000'
Changing owner to 1000:1000...
Changing owner to 1000:1000, done.

$ curl -s -b cj.txt 'http://127.0.0.1:8138/api/trpc/serverSettings.getAll'
{"result":{"data":{"json":{"analytics":{"enableGeneral":false,"instanceId":"nj7suhpqjm4lpc6wba0po4bv","lastSuccessfulSnapshotAt":"2026-11-02T16:46:21.053Z"},"crawlingAndIndexing":{"noIndex":true,"noFollow":true,"noTranslate":true,"noSiteLinksSearchBox":false},"board":{"homeBoardId":"fvrcmchc1pes59jos46xushd","mobileHomeBoardId":"fvrcmchc1pes59jos46xushd","enableStatusByDefault":true,"forceDisableStatus":false},"user":{"enableGravatar":true},"appearance":{"defaultColorScheme":"dark"},"branding":{"appName":"Homarr","greeting":"","logoImageUrl":null,"faviconImageUrl":null,"primaryColor":"#fa5252","secondaryColor":"#fd7e14","lockPrimaryColor":false,"signInBackgroundImageUrl":null,"signInBackgroundOverlay":0.55,"showSignInMarquee":true,"authBranding":{"showAppName":true,"showLogo":true,"showGreeting":true},"defaultRadius":"md","customCss":""},"culture":{"defaultLocale":"en"},"search":{"defaultSearchEngineId":"h39b9uzxh9x2269blnxwdd25"}}}}}

$ curl -s -H "ApiKey: a2a9dbf6.6b2e9362728ba1c909ab165fd3aba3e015f7d80c03adc363" http://127.0.0.1:8138/api/boards/fvrcmchc1pes59jos46xushd/settings
{"pageTitle":null,"metaTitle":null,"logoImageUrl":null,"faviconImageUrl":null,"backgroundImageUrl":null,"backgroundImageAttachment":"fixed","backgroundImageRepeat":"no-repeat","backgroundImageSize":"cover","primaryColor":"#ff0055","secondaryColor":"#00ffb2","opacity":100,"customCss":"","iconColor":null,"itemRadius":"md","disableStatus":false,"id":"fvrcmchc1pes59jos46xushd","name":"dashboard"}

$ curl -s -X PATCH -H "ApiKey: a2a9dbf6.6b2e9362728ba1c909ab165fd3aba3e015f7d80c03adc363" -H 'Content-Type: application/json' --data '{"itemRadius":"lg","disableStatus":true}' http://127.0.0.1:8138/api/boards/fvrcmchc1pes59jos46xushd/settings -w '\nHTTP %{http_code}\n'

HTTP 200
$ curl -s -X PATCH -H "ApiKey: a2a9dbf6.6b2e9362728ba1c909ab165fd3aba3e015f7d80c03adc363" -H 'Content-Type: application/json' --data '{"itemRadius":"md","disableStatus":false}' http://127.0.0.1:8138/api/boards/fvrcmchc1pes59jos46xushd/settings -w '\nHTTP %{http_code}\n'

HTTP 200

$ curl -s -H "ApiKey: a2a9dbf6.6b2e9362728ba1c909ab165fd3aba3e015f7d80c03adc363" http://127.0.0.1:8138/api/users/preferences
{"colorScheme":"dark","byteUnitSystem":"decimal","firstDayOfWeek":1,"pingIconsEnabled":false,"enableRightClickOnWidgets":true,"homeBoardId":null,"mobileHomeBoardId":null,"defaultSearchEngineId":null,"openSearchInNewTab":true,"ddgBangs":true,"headerPreferences":{"version":3,"visible":true,"searchDisplay":"input","logoDisplay":"logoAndText","zones":{"left":[{"type":"builtin","id":"logo"}],"center":[{"type":"builtin","id":"search"}],"right":[{"type":"builtin","id":"boardEdit"},{"type":"builtin","id":"boardSettings"},{"type":"builtin","id":"user"}]}},"userId":"caduhl49zvdplppzn791z65c"}

$ curl -s -H "ApiKey: a2a9dbf6.6b2e9362728ba1c909ab165fd3aba3e015f7d80c03adc363" -H 'Content-Type: application/json' --data '{"colorScheme":"light"}' -X PATCH http://127.0.0.1:8138/api/users/preferences | head -c 120; echo
{"colorScheme":"light","byteUnitSystem":"decimal","firstDayOfWeek":1,"pingIconsEnabled":false,"enableRightClickOnWidgets"

name: homarr-2-10-1-pg-stack

services:
  homarr:
    image: ghcr.io/homarr-labs/homarr:v2.10.1
    container_name: homarr-2-10-1-pg
    restart: unless-stopped
    ports:
      - '8140:7575'
    volumes:
      - /opt/apps/homarr/appdata-pg:/appdata
    environment:
      - SECRET_ENCRYPTION_KEY=${SECRET_ENCRYPTION_KEY}
      - DB_DRIVER=node-postgres
      - DB_DIALECT=postgresql
      - DB_HOST=postgres
      - DB_PORT=5432
      - DB_NAME=homarr
      - DB_USER=homarr
      - DB_PASSWORD=homarr
      - REDIS_IS_EXTERNAL=true
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - homarr-pg-net

  postgres:
    image: postgres:16-alpine
    container_name: homarr-2-10-1-postgres
    restart: unless-stopped
    environment:
      - POSTGRES_DB=homarr
      - POSTGRES_USER=homarr
      - POSTGRES_PASSWORD=homarr
    volumes:
      - /opt/apps/homarr/pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U homarr -d homarr"]
      interval: 5s
      timeout: 3s
      retries: 10
    networks:
      - homarr-pg-net

  redis:
    image: redis:7-alpine
    container_name: homarr-2-10-1-redis
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 10
    networks:
      - homarr-pg-net

networks:
  homarr-pg-net:
    driver: bridge
    ipam:
      config:
        - subnet: 10.89.66.0/24
          gateway: 10.89.66.1

$ docker logs homarr-2-10-1-pg 2>&1 | head -12
Starting with UID='0', GID='0'
Running DB migrations
Skipping seeding of group 'everyone' as it already exists
Skipping seeding of onboarding as it already exists
Skipping seeding for serverSetting as it already exists key=analytics
Skipping seeding for serverSetting as it already exists key=crawlingAndIndexing
Skipping seeding for serverSetting as it already exists key=board
Skipping seeding for serverSetting as it already exists key=user
Skipping seeding for serverSetting as it already exists key=appearance
Skipping seeding for serverSetting as it already exists key=branding
Skipping seeding for serverSetting as it already exists key=culture
Skipping seeding for serverSetting as it already exists key=search

$ docker exec homarr-2-10-1-postgres psql -U homarr -d homarr -c '\dt' 2>&1 | head -15
                   List of relations
 Schema |             Name             | Type  | Owner  
--------+------------------------------+-------+--------
 public | account                      | table | homarr
 public | apiKey                       | table | homarr
 public | app                          | table | homarr
 public | assistant_configuration      | table | homarr
 public | assistant_message            | table | homarr
 public | assistant_thread             | table | homarr
 public | board                        | table | homarr
 public | boardGroupPermission         | table | homarr
 public | boardUserPermission          | table | homarr
 public | cron_job_configuration       | table | homarr
 public | custom_widget_definition     | table | homarr
 public | custom_widget_secret         | table | homarr
（输出节选，实测首尾；完整表清单含 user/session/board 权限等 20+ 表）

$ docker exec homarr-2-10-1-postgres psql -U homarr -d homarr -tAc "select count(*) from \"user\""
0
$ curl -s -o /dev/null -w 'pg health: %{http_code}\n' http://127.0.0.1:8140/api/health/live
pg health: 200

name: homarr-stack
services:
  homarr:
    image: ghcr.io/homarr-labs/homarr:v2.10.1        # 锁版本，不用 latest（发版 17 天 5 版，见部署篇第二节）
    restart: unless-stopped
    ports:
      - '8138:7575'                                   # 反代后仅回环监听更稳：'127.0.0.1:8138:7575'
    volumes:
      - /opt/apps/homarr/appdata:/appdata             # 必持久化；docker.sock 按需再挂
    environment:
      - SECRET_ENCRYPTION_KEY_FILE=/run/secrets/secret_key   # secrets 通道，密钥文件独立备份
      - NO_EXTERNAL_CONNECTION=true                   # 内网环境关外呼
      - BASE_URL=https://homarr.example.com           # TLS 终结反代时必填（3.1 节）
      # LOG_LEVEL 不设即 info；ENABLE_DOCKER=false 可关容器管理面
    secrets:
      - secret_key
secrets:
  secret_key:
    file: ../secrets/secret_key.txt